CVE-2019-11372: Medium severity MediaArea MediaInfo vulnerability
Published Apr 20, 2019
·Updated
An out-of-bounds read in MediaInfoLib::FileTagsHelper::SynchedTest in Tag/FileTags.cpp in MediaInfoLib in MediaArea MediaInfo 18.12 leads to a crash.
Affected Software
5 affected componentsFixes available
MediaArea MediaInfo=18.12
Fedoraproject Fedora=28
Fedoraproject Fedora=29
Fedoraproject Fedora=30
debian/libmediainfo
20.09+dfsg-223.04+dfsg-125.04+dfsg-126.01+dfsg-1
Remediation
Patch Available
Event History
Apr 20, 2019
CVE Published
via MITRE·02:05 PM
Data Sourced
via MITRE·02:05 PM
Description
Data Sourced
via NVD·03:29 PM
RemedyDescriptionSeverityWeaknessAffected Software
Feb 20, 2026
Data Sourced
via Ubuntu·10:22 PM
RemedyDescriptionSeverityAffected Software
Data Sourced
via Debian·10:23 PM
DescriptionAffected Software
Data Sourced
via Launchpad·10:23 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2019-11372?
The severity of CVE-2019-11372 is medium with a severity value of 6.5.
2
How does CVE-2019-11372 affect MediaInfoLib?
CVE-2019-11372 leads to an out-of-bounds read in MediaInfoLib::File__Tags_Helper::Synched_Test in Tag/File__Tags.cpp in MediaInfoLib.
3
Which versions of libmediainfo are affected by CVE-2019-11372?
The versions affected by CVE-2019-11372 are 18.12-2, 20.09+dfsg-2, 23.04+dfsg-1, and 23.10+dfsg-1.
4
How can I fix CVE-2019-11372 on Ubuntu?
To fix CVE-2019-11372 on Ubuntu, update the libmediainfo package to version 17.12-1ubuntu0.1, 18.03.1-1ubuntu0.1, or 18.12-1ubuntu0.1, depending on the release version.
5
Where can I find more information about CVE-2019-11372?
More information about CVE-2019-11372 can be found at the following references: [link1], [link2], [link3].